Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37312e302f32342d3234203d3e20323637393932.roa
File:                     34352e3136372e37312e302f32342d3234203d3e20323637393932.roa (raw, json)
Hash identifier:          t0jI/lpJTTHc7VQBupwX5avG5WMBOlXTvMCoYSu63DE=
Subject key identifier:   A0:0C:90:32:5E:7A:A9:21:AB:32:06:59:03:69:9B:EA:CF:A8:C0:48
Certificate issuer:       /CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
Certificate serial:       5E755D8F29F3823F14A6E58F12B65BA32649D812
Authority key identifier: 78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37312e302f32342d3234203d3e20323637393932.roa
Signing time:             Wed 25 Jun 2025 13:43:54 +0000
ROA not before:           Wed 25 Jun 2025 13:38:54 +0000
ROA not after:            Wed 24 Jun 2026 13:43:54 +0000
asID:                     267992
IP address blocks:        45.167.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 01:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:5d:8f:29:f3:82:3f:14:a6:e5:8f:12:b6:5b:a3:26:49:d8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
        Validity
            Not Before: Jun 25 13:38:54 2025 GMT
            Not After : Jun 24 13:43:54 2026 GMT
        Subject: CN=A00C90325E7AA921AB32065903699BEACFA8C048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:09:24:e1:e4:29:61:19:d6:c4:73:68:b6:9b:
                    34:4a:ce:9e:93:f5:d9:78:ad:d7:54:68:48:d0:b4:
                    a9:ba:52:38:1a:df:21:6a:cd:dc:ab:41:7b:3e:85:
                    cb:12:1d:02:25:9f:66:e7:eb:7e:7e:16:af:19:04:
                    31:60:ef:53:a3:9c:c2:39:d7:7f:9e:87:e8:6f:b5:
                    75:7d:e1:25:35:3b:7f:8c:34:51:a0:ca:19:94:1f:
                    86:d5:be:d9:d1:fe:9a:bd:2c:d1:35:71:d8:98:f8:
                    5b:4d:98:84:ca:c4:89:46:a1:e0:e5:e8:e6:3a:4e:
                    41:f7:9a:70:16:c8:5b:c7:3d:e4:c1:eb:50:8d:f5:
                    d5:3b:03:8b:3b:d3:31:f5:bf:f5:47:cf:b6:0e:2e:
                    84:10:26:0f:26:c5:07:b3:1a:99:7d:e7:02:84:34:
                    37:68:23:26:87:1b:f2:d4:97:49:cd:77:af:f6:22:
                    a1:d7:02:3b:7c:37:ea:0e:52:44:13:65:6d:d4:9d:
                    18:99:b5:e7:2c:10:a2:af:bc:92:a8:da:dc:85:7c:
                    ce:73:b2:87:7f:3f:9a:91:79:ed:75:79:39:54:b4:
                    8b:31:b0:80:5b:c9:a1:bd:91:1f:e5:c5:6c:79:74:
                    17:2b:1b:1f:72:9f:09:f1:d0:c8:db:bd:59:8c:84:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0C:90:32:5E:7A:A9:21:AB:32:06:59:03:69:9B:EA:CF:A8:C0:48
            X509v3 Authority Key Identifier:
                keyid:78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37312e302f32342d3234203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:07:7d:75:fa:e6:c2:ed:1a:96:a4:d9:b4:1c:ee:a4:4c:
         99:33:1b:7f:fb:cc:79:b7:a5:fb:bc:cd:d7:7d:1a:c1:f7:8e:
         a5:c2:e2:04:c0:8a:ff:b1:a4:f0:0c:5b:39:8a:51:5d:3f:4e:
         c4:91:a9:f4:40:ea:93:23:9e:c1:ec:be:e2:75:21:25:c0:e0:
         c1:69:5b:21:cf:f7:cb:f0:16:77:b2:d6:31:23:26:2f:0f:90:
         d0:fd:50:e0:3c:7b:14:e4:cc:53:13:1f:38:d1:59:fc:a5:51:
         91:a1:9c:41:3b:9e:01:31:11:41:83:b9:cf:8e:6a:53:2b:66:
         2c:d8:88:20:7b:c5:2f:92:98:1c:66:86:97:8b:b9:09:9c:59:
         be:7d:40:19:5f:06:53:eb:20:f7:e7:4e:f4:ee:99:4e:b3:c7:
         8d:84:2b:d7:ac:ad:4c:f6:5f:e6:8d:35:eb:4f:d4:8c:d9:8d:
         57:2e:61:c2:9f:b6:9a:5d:b6:d0:d7:23:46:78:01:8b:88:41:
         0f:f4:52:b1:f6:be:57:44:21:52:f6:47:4c:ed:fb:59:89:be:
         5c:b7:da:fc:7b:c9:a5:fc:c7:ed:90:ad:41:42:bf:f2:8f:86:
         ae:73:62:42:ff:a0:69:a1:d2:b4:05:d6:92:e8:fc:d1:f1:18:
         8b:96:af:bc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXnVdjynzgj8UpuWPErZboyZJ2BIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3M0UxRThGNERBQzgwRDVFOTlCODE5QThBNDI5RTVD
M0U4MjVFNzAeFw0yNTA2MjUxMzM4NTRaFw0yNjA2MjQxMzQzNTRaMDMxMTAvBgNV
BAMTKEEwMEM5MDMyNUU3QUE5MjFBQjMyMDY1OTAzNjk5QkVBQ0ZBOEMwNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3CSTh5ClhGdbEc2i2mzRKzp6T
9dl4rddUaEjQtKm6Ujga3yFqzdyrQXs+hcsSHQIln2bn635+Fq8ZBDFg71OjnMI5
13+eh+hvtXV94SU1O3+MNFGgyhmUH4bVvtnR/pq9LNE1cdiY+FtNmITKxIlGoeDl
6OY6TkH3mnAWyFvHPeTB61CN9dU7A4s70zH1v/VHz7YOLoQQJg8mxQezGpl95wKE
NDdoIyaHG/LUl0nNd6/2IqHXAjt8N+oOUkQTZW3UnRiZtecsEKKvvJKo2tyFfM5z
sod/P5qRee11eTlUtIsxsIBbyaG9kR/lxWx5dBcrGx9ynwnx0MjbvVmMhAb1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoAyQMl56qSGrMgZZA2mb6s+owEgwHwYDVR0j
BBgwFoAUeHPh6PTayA1embgZqKQp5cPoJecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JzaTJMNU0xUFpKdDNnTGJxbWl4MUNyUnVXQUFYWm5tRGR3cVFrTXd1
bmEvMC83ODczRTFFOEY0REFDODBENUU5OUI4MTlBOEE0MjlFNUMzRTgyNUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4NzNFMUU4RjREQUM4MEQ1
RTk5QjgxOUE4QTQyOUU1QzNFODI1RTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCc2kyTDVNMVBaSnQzZ0xicW1peDFDclJ1V0FBWFpubURkd3FRa013dW5hLzAv
MzQzNTJlMzEzNjM3MmUzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALadHMA0GCSqGSIb3DQEBCwUAA4IBAQCakgd9dfrm
wu0alqTZtBzupEyZMxt/+8x5t6X7vM3XfRrB946lwuIEwIr/saTwDFs5ilFdP07E
kan0QOqTI57B7L7idSElwODBaVshz/fL8BZ3stYxIyYvD5DQ/VDgPHsU5MxTEx84
0Vn8pVGRoZxBO54BMRFBg7nPjmpTK2Ys2Igge8UvkpgcZoaXi7kJnFm+fUAZXwZT
6yD350707plOs8eNhCvXrK1M9l/mjTXrT9SM2Y1XLmHCn7aaXbbQ1yNGeAGLiEEP
9FKx9r5XRCFS9kdM7ftZib5ct9r8e8ml/MftkK1BQr/yj4auc2JC/6BpodK0BdaS
6PzR8RiLlq+8
-----END CERTIFICATE-----
Generated at Fri Jul 4 12:05:20 2025 by rpki-client